Install Guide

[HKLM\SOFTWARE\CREDANT\CMGShield]
"DeleteTempFiles"=REG_DWORD:0
Not deleting temporary files increases initial encryption time.
● Encryption displays the length of each policy update delay prompt for five minutes each time. If the user does not respond
to the prompt, the next delay begins. The final delay prompt includes a countdown and progress bar, and it displays until the
user responds, or the final delay expires and the required logoff/reboot occurs.
You can change the behavior of the user prompt to begin or delay encryption, to prevent encryption processing after no user
response to the prompt. To do this, set the value:
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield]
"SnoozeBeforeSweep"=DWORD:1
Any non-zero value changes the default behavior to snooze. With no user interaction, encryption processing is delayed up to
the number of configurable allowed delays. Encryption processing begins when the final delay expires.
Calculate the maximum possible delay as follows (a maximum delay would involve the user never responding to a delay
prompt, each of which displays for 5 minutes):
(NUMBER OF POLICY UPDATE DELAYS ALLOWED × LENGTH OF EACH POLICY UPDATE DELAY) + (5 MINUTES ×
[NUMBER OF POLICY UPDATE DELAYS ALLOWED - 1])
● Use the registry setting to have Encryption poll the Dell Server for a forced policy update. Create or modify the registry
setting:
[HKLM\SOFTWARE\Credant\CMGShield\Notify]
"PingProxy"=DWORD value:1
The registry setting automatically disappears when done.
● Use the registry settings to allow Encryption to send an optimized, full (activated and unactivated users), or full (activated
users only) inventory to the Dell Server.
○ Send Optimized Inventory to Dell Server:
Create or modify the registry setting:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield]
"OnlySendInvChanges"=REG_DWORD:1
If no entry is present, optimized inventory is sent to the Dell Server.
○ Send Full Inventory to Dell Server:
Create or modify the registry setting:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield]
"OnlySendInvChanges"=REG_DWORD:0
If no entry is present, optimized inventory is sent to the Dell Server.
○ Send Full Inventory for All Activated Users
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield]
"RefreshInventory"=REG_DWORD:1
This entry is deleted from the registry as soon as it is processed. The value is saved in the vault, so even if the computer
is rebooted before the inventory upload takes place, Encryption still honors this request the next successful inventory
upload.
This entry supersedes the OnlySendInvChanges registry value.
● Slotted Activation is a feature that allows you to spread activations of clients over a set time period to ease Dell Server
load during a mass deployment. Activations are delayed based on algorithmically generated time slots to provide a smooth
distribution of activation times.
For users requiring activation through VPN, a slotted activation configuration for the client may be required, to delay initial
activation for long enough to allow time for the VPN client to establish a network connection.
These registry entries require a restart of the computer for the updates to take effect.
○ Slotted Activation
Registry Settings
27